Virus Database

Burger Family

Description Burger Family

These are dangerous, non-memory resident parasitic or overwriting viruses. They write themselves to the beginning of .COM files of the current drive.
"Burger.1336.a" erases and doesn't restore the file attributes and displays the following strings:
Virdem Ver.: 1.06 (Generation 1) aktive.
Copyright by R.Burger 1986,1987
Phone.: D - 05932/5451
This is a demoprogram for
computerviruses. Please put in a
number now.
If you're right, you'll be
able to continue.
The number is between 0 and
Sorry, you're wrong
More luck at next try all.
Famous. You're right.
You'll be able to continue.
All your programs are
struck by VIRDEM.COM now.

"Burger.1336.b" types:
Virdem Ver.: 1.06 (Generation 5) aktiv.
Copyright by R.Burger 1986,1987
Tel.: 05932/5451
Dies ist ein Demoprogramm fuer
Computerviren. Geben Sie nun
bitte eine Zahl ein.
Wenn Sie richtig raten,duerfen
Sie weiterarbeiten.
Die Zahl liegt zwischen
0 und
Bedauerlicherweise war Ihre
Antwort nicht richtig.
Mehr Glueck beim naechsten Mal ....
Bravo. Richtige Antwort.
Sie duerfen weiterarbeiten.
Alle Ihre Programme sind nun infiziert.

"Burger.1336.c" contains the text:
*.com *
Virus Infestation ACTIVE
KILLER
SOMETHING WONDERFUL HAS HAPPENED !!!

In September, "Burger.301" formats the floppy disk sectors and types:
Sad virus - 24/8/91

"Burger.560" can erase the sectors of disks with random numbers. Some of "Burger.560" contains the string: "Function not supported by network'Required system component n". "Burger.560.b" displays the following messages:
MADE OUT!..
[GARDEL] VIRUS.
Cada dia infecta mejor.
By:STONE FIST & CYBER ELF
MADE OUT!..STONE FIST &CYBER ELF.[TANGO] VIRUS.Ind. Arg

and erases disk sectors. "Burger.560.h" contains the internal text "RB2 - LiquidCode ". "Burger.601" decrypts and types "Kewl Dewdz!", it also contains the encrypted string "Made in STL (c) '91". "Burger.824" types the text:
Datum falsch
Bitte DATE aufrufen

"Burger.1310" types "Welcome to Twin Peaks..Your PC now has the Twin Peaks virus."
"Burger.1542" erases the screen by moving the color picture.
"Burger.Pirates.609" erases the disk sectors and formats the disks. It contains the internal text string:
1989 / 1990 Software Pirates - Fast Serial - Portugal *.com *

Check other viruses! Be aware! Use Antiviral Software

Curse.400

Description Curse.400

It's a harmless memory resident parasitic virus. It copies itself into the Interrupt vectors table, traces and hooks INT 21h and writes itself to the end of COM- and EXE-files that are executed. It contains the internal text string:
CURSE IV - Dedicated to Eve

Cybercide Family

Description Cybercide Family

These are dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of .COM-files. "Cybercide.1288,1307,1321" store the names of the files on DOS calls FindFirst/FindNext and OpenHandle. On call to DOS function GetDiskSpace they infect the files that are stored. They hit the files on DOS call CloseHandle also. "Cybercide.2229,2256" hit the files on FindFirst/FindNext DOS calls only. On opening the infected file the viruses disinfect it.
"Cybercide.2229,2256" hook INT 09h, 1Ch also and call trigger routine from these handlers. On typing "anoi" on keyboard these viruses add "iS AROUND!", on pressing Alt-Del they display chars 'A', 'N', 'O' and 'I' in four corners of the screen. Depending on system timer they either displays color cross in background (looks as Swedish national flag), or play the tune (the Imperial March from "The Empire Strikes Back") and display the message and then halt computer:

or erase random selected disk sector by the string:
>>> A.N.O.I <<<

"Cybercide.1288,1307,1309,1321" erases the disk sectors.
These viruses contain the internal text strings also (some of them are written backward in "Cybercide.2229,2256"):
"Cybercide.1288":
huh huh m huh m huh hu hu hu huh huh huh m huh mhu huh hu huh huh
Im going to kick your ass again
(c)1995 Etheopia
Virus: Butt-HeadAuthor: Etheopia/FLooD
Uhhhh, Hey baby..

"Cybercide.1307,1309":
Simple Simon met a pieman going to the fair said
Simple Simon to the pieman let me take your ware
(c)1993 Cruel Entit
%%% MY LITTLE PONY %%% COPYRIGHT(C) 1993 A.N.O.I. %%%
>>> A.N.O.I <<<

"Cybercide.1321":
simple simon met a pieman going to the fair said
simple simon to the pieman let me take your ware
- my little pony - copyright(c) 1993 Cruel Entity and A.N.O.I. -
.. sweden rise again ..

"Cybercide.2229,2256":
nam nesut agnåm dem änk mo änk ,marfkcig xeR sluloraC
ruh nes egnäl röf ,nä in snniM
YTITNE na ot LEURC eb reven
ynollef ELIV a si GINKLAWYAJ
all I SHALL FEAR NO EVIL ...
**CYBERCIDE** -- FLOATING THROUGH THE VOID
-=CYBERCIDE=- 01-30-1993 * COPYRIGHT (C) 1992-93 A.N.O.I DEVELOPMENT

Home